inclusive-dates
inclusive-dates copied to clipboard
Published
20 hours ago •
fymmot
fymmot
[BUG] High Code Scanning vulnerability
Describe the bug
In the inclusive-dates_3.entry.js, it has this code's part:
exports.extractTerms = extractTerms;
function matchAnyPattern(dictionary) {
const joinedTerms = extractTerms(dictionary)
.sort((a, b) => b.length - a.length)
.join("|")
.replace(/./g, "\.");
The code scanning said "This does not escape backslash characters in the input."
